From 667e3e419cece2faee67590aa88c2583c3032a43 Mon Sep 17 00:00:00 2001
From: Don Armstrong <don@donarmstrong.com>
Date: Tue, 5 Jan 2010 23:48:11 -0800
Subject: [PATCH]  * fix XSS in include_exclude_key

---
 templates/en_US/cgi/pkgreport_options_include_exclude_key.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/en_US/cgi/pkgreport_options_include_exclude_key.tmpl b/templates/en_US/cgi/pkgreport_options_include_exclude_key.tmpl
index da67c30..ab0a246 100644
--- a/templates/en_US/cgi/pkgreport_options_include_exclude_key.tmpl
+++ b/templates/en_US/cgi/pkgreport_options_include_exclude_key.tmpl
@@ -9,6 +9,6 @@
 			package    => 'with package',
                        ],$key1||'')}
 </select>
-<input type="text" name="_fo_{$incexc}value" value ="{$key2||''}">
+<input type="text" name="_fo_{$incexc}value" value ="{html_escape($key2)||''}">
 <!-- {$value_index} -->
 </nobr>
-- 
2.39.2